Privacy Policy

Data controller

The controller of your personal data is Tara Vision, LLC, United States of America. For domestic market payment collection via bank transfer, Тара Визија ДООЕЛ Охрид (North Macedonia) acts as a data processor exclusively for invoicing purposes.

Data we collect

• -Account data - email, language preference
• -Company data - name, tax number, VAT number, address, eUJP ID
• -Digital certificates - encrypted with AES-256-GCM, private keys are never stored decrypted
• -Invoices - full invoice data including items, buyers, and UJP responses
• -Clients - name, tax number, address
• -Audit logs - user actions, IP address, timestamp

Purpose of processing

• -Providing the e-invoicing service
• -Communication with the UJP e-Invoice system at your request
• -Security and abuse prevention
• -Fulfilling legal obligations

Storage and security

• -Your data is stored on servers in Europe
• -Certificates are encrypted with AES-256-GCM
• -All communications are encrypted with TLS/HTTPS
• -Server access is restricted with SSH keys and firewall

Data sharing

• -UJP (Public Revenue Office) - only when submitting invoices, at your explicit request
• -Stripe - only for card payments (after the pilot phase)
• -Тара Визија ДООЕЛ Охрид - only if you choose bank transfer, exclusively for invoicing purposes

Your rights

• -Access - request a copy of your data
• -Correction - request correction of inaccurate data
• -Deletion - request complete deletion of your account and data
• -Export - download your invoices in PDF format

Analytics

We use self-hosted, cookie-free anonymous analytics to measure website traffic. No personal data is collected, no cookies are used, and no individual users are tracked. All analytics data is stored on our own servers.

Cookies

We only use essential cookies for application functionality (authentication, language preferences). We do not use tracking cookies.

Data retention

Your data is retained as long as you use the service. Upon account deletion, all data is permanently deleted within 30 days.